From: Wu,Jiang (wujiang@xxxxxxxxx)
Date: Sun Oct 22 2000 - 03:37:55 GMT-3
Try using:
access-list 1 deny 192.168.0.20
access-list 1 permit 192.168.0.0 0.0.0.255
Regards,
-Wu
----- Original Message -----
From: shaxw <shaxw@wafersystems.com>
To: CCIE Lab <ccielab@groupstudy.com>
Sent: Sunday, October 22, 2000 12:41 PM
Subject: Help: IP NAT problem!
> Hi,
>
> I have one router has two Ethernet interfaces, one connects to ISP, and the o
ther to inside local LAN. I only have one legal address, which assigned to the
outside interface. Now I have a WWW server, which located on the inside LAN, I
configure the inside source port translation, but each time, when client from I
nternet access this server, the port changes to other port, not 80, so the acce
ss is failure. Somebody can help me ?
>
> The following is the configuration:
>
> !
> version 12.0
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname xxx
> !
> !
> ip subnet-zero
> no ip domain-lookup
> !
> cns event-service server
> !
> !
> !
> interface Ethernet0
> ip address xx.xx.xx.xx 255.255.255.192 ! sorry.
> no ip directed-broadcast
> ip nat outside
> media-type 10BaseT
> !
> interface Ethernet1
> ip address 192.168.0.1 255.255.255.0
> no ip directed-broadcast
> ip nat inside
> media-type 10BaseT
> !
> ip nat inside source list 1 interface Ethernet0 overload
> ip nat inside source static tcp 192.168.0.20 80 interface Ethernet0 80
> ip classless
> ip route 0.0.0.0 0.0.0.0 Ethernet0
> no ip http server
> !
> access-list 1 permit 192.168.0.0 0.0.255.255
>
> ...
>
> When using show ip nat tran, the static translation is in the list, but when
client access this server(192.168.0.20), the router change the port to 33,34,35
, ....
> I don't know what's going on in the router,pls help me!
>
> Thanks
>
> Jack Sha
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:29 GMT-3